Privacy Policy

1. Introduction

This Privacy Policy explains how the mobile game MAZEstic - Maze Worlds ("MAZEstic" or "the Game") handles information. The Game is developed and published by CTN Devs, an independent developer based in Romania ("I", "me").

I am the controller of the personal data described in this policy. You can contact me at any time at [email protected], and I will provide my full legal details on request.

MAZEstic is currently in early access. Features may change, and this policy will be updated before any change that affects how your information is handled.

2. Summary

• You do not need an account to play. There is no sign-in and no profile.
• Your progress, best times, and settings are stored on your device.
• When you finish a level, your time is sent to the global best-times table together with a random id that identifies your installation and nothing else about you.
• The Game uses GameAnalytics for usage statistics and Sentry for crash reports. These services process device identifiers and technical data.
• The early access build shows no ads.
• The Game never asks for your photos, contacts, location, or any other personal content.

3. Data Stored on Your Device

The Game stores the following information locally on your device:

• progress: which levels you have unlocked, the stars you have collected, and your best time for each level
• star points and the balls, floors, and walls you have unlocked
• your chosen ball, floor, and wall
• settings, such as music, sound, brightness, graphics quality, tilt sensitivity, and control scheme
• a random installation id, described in section 4
• best times that have not yet reached the global table, so a finished run is not lost to a dropped connection

This data stays under your control. It is deleted when you clear the Game's data or uninstall the Game, and it is not copied to any device backup.

4. Global Best Times

Each level has a single fastest time, shared by everyone who plays. When you finish a level, the Game sends the following to a server I operate:

• a random installation id
• the world, difficulty, and level number
• your completion time in milliseconds

Nothing else is sent. There is no name, no email address, no device model, and no advertising identifier.

The installation id is a random 32-character value the Game generates the first time it runs and then stores on your device. It is not derived from your device, your account, or anything about you, and it cannot be traced back to you by me or by anyone else. It exists so the Game can tell whether the record on a level is yours and show you the crown. Because it is a value attached to a single installation, data protection law treats it as personal data, which is why it is described here. Clearing the Game's data or reinstalling the Game produces a new id, unconnected to the old one.

The server stores only one row per level: the fastest time and the id that set it. A time that is not the fastest is discarded. The service runs on Cloudflare Workers and Cloudflare D1, hosted in the European Union.

Your best times are also kept on your device, so the Game works fully offline. The connection is used only for this table.

5. Analytics (GameAnalytics)

The Game uses GameAnalytics to understand how it is played, so I know which levels are too hard, where players stop, and what gets used. GameAnalytics receives:

• an identifier for your installation generated by GameAnalytics
• device model, operating system version, platform, and country, derived by GameAnalytics from your IP address
• the Game's version and session information
• gameplay events: a level started, completed, or failed, how long it took, how many stars were collected, and which ball, floor, and wall were in use

I see these only as totals and averages across all players. I cannot use them to identify you.

GameAnalytics is operated by GameAnalytics A/S, Denmark. Their privacy policy: https://gameanalytics.com/privacy

6. Crash Reports (Sentry)

When the Game crashes or hits a serious error, a report is sent to Sentry so I can fix it. A report contains the error itself, the sequence of code that led to it, the Game's version, your device model and operating system version, and the Game's recent log messages. It does not contain your progress or anything you typed.

Reports are sent to Sentry's European region, hosted in Germany. Sentry is operated by Functional Software, Inc. Their privacy policy: https://sentry.io/privacy/

7. Advertising

The early access build of MAZEstic shows no ads, and no advertising identifier is read or sent.

If ads are introduced later to keep the Game free, this policy will be updated first, the Game will ask for your consent where the law requires it, and you will be able to change that choice from within the Game.

8. Motion Sensor

The Game reads your device's accelerometer to know how you are tilting it, which is how the ball moves. This reading happens entirely on your device, is used only to move the ball, is never stored, and is never sent anywhere. No Android permission is required for it, and it reveals nothing about you or where you are.

9. Legal Bases for Processing

• Your request when you finish a level and your time is submitted to the global best-times table.
• Legitimate interest in understanding how the Game is played so it can be improved, and in receiving crash reports so faults can be fixed.
• Consent will be the basis for personalized advertising if ads are added, and will be asked for before any such processing begins.

10. Service Providers and International Transfers

The Game relies on three services: Cloudflare (Workers and D1) for the global best times, GameAnalytics for usage statistics, and Sentry for crash reports. The Cloudflare and Sentry data described above is processed in the European Union. GameAnalytics may process data on servers outside the European Economic Area, including in the United States; such transfers are protected by the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

I do not sell your personal data and do not share it with anyone else.

11. Data Retention

• Data on your device: until you clear the Game's data or uninstall the Game.
• Global best times: kept while the record stands. A time that is beaten is overwritten and not kept.
• Analytics data: retained by GameAnalytics according to their retention policy, after which they delete it.
• Crash reports: up to 90 days, after which Sentry deletes them.
• Emails you send me: until the matter is resolved, and no longer than 12 months.

12. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• access the personal data held about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to processing, including processing based on legitimate interest
• receive your data in a portable format
• withdraw your consent at any time, without affecting processing that happened before

Everything stored on your device is deleted by clearing the Game's data or uninstalling the Game. To have a record removed from the global best times, email me at [email protected]. I will reply within one month.

You also have the right to lodge a complaint with a data protection authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

13. Children

The Game is suitable for a general audience (rated PEGI 3), but it is not directed at children under 13. I do not knowingly collect personal data from children under 13. If you believe a child has sent me personal data, please contact me and I will delete it.

14. Data Security

Data sent between the Game and the services described above is encrypted in transit. I use reasonable technical and organizational measures to protect information, and I rely on Cloudflare's, GameAnalytics', and Sentry's security for the data they process. No method of transmission or storage is completely secure, however.

15. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last changed. For significant changes, I will provide a notice on this page or in the Game.

16. Contact

Email: [email protected]